Skip to content

CVE-2011-1574

Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2...

6.8 MediumPublic exploitFix available

CVE-2011-1574 is a medium vulnerability (CVSS 6.8) in Konstanty Bialkowski Libmodplug, published April 26, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 42.9%, the 98th percentile. Fixed in libmodplug 1:0.8.8.2-1.

Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file.

Exploit likelihood

42.9%Down 35.2 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file.

Record: CVE-2011-1574
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file.

Record: CVE-2011-1574
Updated: 2026-11-02

EUVDEUVD-2011-1575 No score

Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file.

Record: EUVD-2011-1575
Updated: 2026-11-03

GitHub AdvisoriesGHSA-65jc-w8gm-x2mq No score

Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2...

Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file.

Record: GHSA-65jc-w8gm-x2mq
Weakness: CWE-119
Updated: 2026-11-02

OSV No score

Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file.

Record: CVE-2011-1574
Updated: 2026-11-02

OSVDEBIAN-CVE-2011-1574 No score

Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file.

Record: DEBIAN-CVE-2011-1574
Updated: 2026-11-02

Affected products

konstanty bialkowski libmodplug

Affected packages

Affected packages
Package	Affected	Fixed
`libmodplug` Debian:12	before 1:0.8.8.2-1	1:0.8.8.2-1
`libmodplug` Debian:13	before 1:0.8.8.2-1	1:0.8.8.2-1
`libmodplug` Debian:14	before 1:0.8.8.2-1	1:0.8.8.2-1
`libmodplug` Debian:5.0	before 1:0.8.4-1+lenny2, plus listed versions 1:0.8.4-11:0.8.4-1+lenny1	1:0.8.4-1+lenny2
`libmodplug` Debian:6.0	before 1:0.8.8.1-1+squeeze1, plus listed versions 1:0.8.8.1-1	1:0.8.8.1-1+squeeze1
`gstreamer-plugins` Red Hat:enterprise_linux:4::as	before 0:0.8.5-1.EL.3	0:0.8.5-1.EL.3
`gstreamer-plugins-debuginfo` Red Hat:enterprise_linux:4::as	before 0:0.8.5-1.EL.3	0:0.8.5-1.EL.3
`gstreamer-plugins-devel` Red Hat:enterprise_linux:4::as	before 0:0.8.5-1.EL.3	0:0.8.5-1.EL.3
`gstreamer-plugins` Red Hat:enterprise_linux:4::desktop	before 0:0.8.5-1.EL.3	0:0.8.5-1.EL.3
`gstreamer-plugins-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:0.8.5-1.EL.3	0:0.8.5-1.EL.3

Show 7 moreShow less

Affected packages
Package	Affected	Fixed
`gstreamer-plugins-devel` Red Hat:enterprise_linux:4::desktop	before 0:0.8.5-1.EL.3	0:0.8.5-1.EL.3
`gstreamer-plugins` Red Hat:enterprise_linux:4::es	before 0:0.8.5-1.EL.3	0:0.8.5-1.EL.3
`gstreamer-plugins-debuginfo` Red Hat:enterprise_linux:4::es	before 0:0.8.5-1.EL.3	0:0.8.5-1.EL.3
`gstreamer-plugins-devel` Red Hat:enterprise_linux:4::es	before 0:0.8.5-1.EL.3	0:0.8.5-1.EL.3
`gstreamer-plugins` Red Hat:enterprise_linux:4::ws	before 0:0.8.5-1.EL.3	0:0.8.5-1.EL.3
`gstreamer-plugins-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:0.8.5-1.EL.3	0:0.8.5-1.EL.3
`gstreamer-plugins-devel` Red Hat:enterprise_linux:4::ws	before 0:0.8.5-1.EL.3	0:0.8.5-1.EL.3

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	VideoLAN VLC Media Player 1.1.8 - ModPlug ReadS3M Stack Buffer Overflow (Metasploit)	2011-04-08
Metasploit	VideoLAN VLC ModPlug ReadS3M Stack Buffer Overflow	2011-04-07

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV

References

Show 22 moreShow less